Method for detecting a leakage in an air spring system of a motor vehicle

ABSTRACT

A method detects leakages in a motor vehicle air spring system which includes a plurality of air springs and has a level control arrangement. The level control arrangement includes: an electronic control apparatus; a plurality of elevation determination sensors associated with corresponding ones of the air springs; a pressure sensor; a plurality of air spring valves corresponding to respective ones of the air springs and a compressor. The elevation determination sensors and the pressure sensor are connected to the control apparatus for supplying signals thereto. The control apparatus functions to process the signals for controlling the air spring valves and the compressor for controlling the motor vehicle upwardly or downwardly in elevation. In the method, at a first time point (t 1 ), the elevation-distance values (h 1 ) and the corresponding air pressure (p 1 ) are measured for each air spring and the elevation-distance values are stored with the time of measurement with the first time point (t 1 ). At a second time point (t 2 ), the elevation-distance value (h 2 ) is measured and, if needed, the air pressure (p 2 ) in the corresponding air springs. A leakage of a particular air spring is detected when no desired level change (h s ) takes place between the first time point (t 1 ) and the second time point (t 2 ) and, at this particular air spring, only a pressure change was determined from the first time point (t 1 ) to the second time point (t 2 ) in accordance with a first condition and, simultaneously, an elevation change (h 2 ) was determined in accordance with a second condition.

BACKGROUND OF THE INVENTION

[0001] The invention proceeds from a motor vehicle air spring system having a level control arrangement. Air spring systems with level control arrangements are known in various configurations.

[0002] U.S. Pat. No. 5,142,897 discloses an arrangement for level control for a vehicle having air springs. The elevation signals of the elevation sensors are filtered at a time constant in order to improve the control performance of the arrangement. An elevation change is either caused by a load change or by a leak in an air spring. In control operations, usually there is no differentiation as to whether a control request takes place because of a changed load state or because of a leakage.

SUMMARY OF THE INVENTION

[0003] It is an object of the invention to provide a method for detecting especially medium size leaks in a motor vehicle air spring system, that is, with a control, for example, the desired level can still be reached.

[0004] The essence of the arrangement according to the invention is a function logic for detecting leakages in the level-controlled air spring system. This function logic is part of the level control arrangement. The operation of this logic is based on a separate treatment of the level control in different driving states.

[0005] The operation of the function logic will now be described.

[0006] (a) Ignition is Switched Off.

[0007] In this state, the level control apparatus switches off after an after-run time of, for example, five minutes. Thereafter, the control apparatus (SG) awakens time controlled, for example, after two hours, and then, for example, after five hours again in order to evaluate the control deviation. If it is detected that the vehicle is too low at least at one vehicle corner (lower threshold value elevation level reached or there is a drop therebelow), the vehicle is controlled at all vehicle corners to the desired level within the tolerance limits or threshold values. Thereafter, the control apparatus switches into the sleep mode.

[0008] (b) Ignition of the Vehicle is Switched On.

[0009] A continuous level monitoring takes place by the control apparatus (SG). If the tolerance limits are exceeded (for example, there is a drop below the threshold value h_(su)) the vehicle is again controlled to the desired level.

[0010] With respect to (a), the detection logic according to the invention for detecting leakages in the individual air springs during control apparatus after-run.

[0011] When the ignition is switched off (KL15-off) and after the elapse of a fixed time span (for example, five minutes), the control apparatus goes into the sleep mode (current save mode). Before the control apparatus goes into the sleep mode, the air pressure p₁ for each air spring (VL, VR, HL, HR) and the distance h₁ (VL, VR, HL, HR) is measured in the air springs from wheel to wheel at time point t₁ in accordance with the method of the invention and is stored together with the time t₁. With a renewed awakening of the control apparatus (movement out of the current save mode), only with the detection of an up control requirement at time point t₂ (that is, there is a drop below the lower threshold value h_(su)), the air pressures p₂ (VL, VR, HL, HR) are measured in the individual air springs.

[0012] For specific circuit arrangements, it is especially advantageous to only then determine the air pressures p₂ when there is a drop below the lower threshold value h_(su) of the elevation level at at least one vehicle corner. In these circuit arrangements, an air exchange can take place with the corresponding lines and, if required, with the connected air drive for each pressure measurement in an air spring insofar as a pressure drop exists between the pressure in the air spring bellows and the components connected for the pressure measurement. The volume of an air dryer amounts normally to approximately 200 to 300 cm³. If the air dryer, for example, has a pressure close to atmospheric pressure, then a drop of the elevation level at the vehicle corner of this air spring bellows is possible when there is an air exchange and a pressure compensation with the connected air spring bellows. In an unfavorable case, a drop of the vehicle corner could take place and lead to a detection of leakage during the determination of a leakage in the sequence of first carrying out a pressure measurement and then determining the elevation level because of the above-described air exchange and pressure compensation with the connected lines and components. In the determination of the leakage in the reverse sequence, this is reliably avoided (first determining the elevation level and then, when necessary, making the pressure measurement) whereby pressurized air and energy are saved.

[0013] For evaluating the condition, that air spring is used for the evaluation at whose axle a control requirement was detected and that air spring is selected which lies the lowest, that is, which has the lowest value of h₂. The conditions for the air spring selected in this manner are as follows:

[0014] Condition 1: (p₁−p₂)>K₁ wherein K₁≧0 (Wheel load has not increased, for example, K₁=0 bar) and

[0015] Condition 2: {h(t₁)−h(t₂)}*K₃/(t₂−t₁)>K₂ wherein K₂>0 and K₃>0 (Elevation level at the corresponding air spring has not decreased, for example, K₂=1/s and K₃=10/mm) and,

[0016] Condition 3: (t₂−t₁)<T_(Limit) (Time condition in which a leak can be detected).

[0017] If the above conditions are satisfied, a leakage at this air spring is detected and a wheel-specific counter Z_(T) is incremented. If, in contrast, no control requirement is detected at t₂ (that is, there is no drop below threshold value h_(su) of the corresponding air spring), the corresponding wheel-specific counters Z_(T) (VL, VR, HL, HR) are decremented, preferably, minimally to the value 0.

[0018] At T_(Limit), it can be inputted how large the leak should be so that this leak can still be detected. The greater T_(Limit) is, the lower the leakage values which still can be detected and the lower T_(Limit) is, the greater the leakage has to be in order to still be detected via the conditions.

[0019] If a wheel-specific counter Z_(T) exceeds a threshold value K₄ (for example, the value 4), a leakage fault is detected. A leakage fault is displayed optically and/or acoustically in the interior of the vehicle. The particular leakage fault can be displayed wheel-specifically and/or as a fault for the entire air spring system. A leakage fault is preferably stored in the control apparatus in a permanent memory in order to make it available for later analysis and repair purposes.

[0020] For multiple awakening operations, the method is correspondingly repeated in that the values at the instantaneous time point are again assigned to the time point t₂ and to the past time point, the time point t₁. That is, as a new time point t₁, the last time point t₂ is selected at which the control apparatus was transferred from the active state into the sleep mode. The new time point t₂ is selected time-controlled after a pregiven time span of, for example, three hours when the control apparatus is again transferred out of the sleep mode into the active state.

[0021] Variations:

[0022] The time point t₁ does not have to be necessarily determined with the first transfer of the control apparatus after the switchoff of the ignition (KL15=off) into the sleep mode; instead, the time point t₁ can be determined also, for example, with the first awakening of the control apparatus (leaving the sleep mode) and the detection of a control need, that is, there is a drop below the threshold value h_(su) of at least one air spring. The time point t₂ shifts then to the next awakening of the control apparatus. The reason is that a separately initiated pressure measurement causes disturbing noises. At the start of each control operation, however, a pressure measurement is anyway carried out. With this variation, no additional pressure measurements (valve switching) are therefore necessary. Furthermore, effects because of the cooling of the air springs can be precluded in that t₁ is so selected that the air spring is cooled down.

[0023] With respect to condition (b), the detection logic of the invention for detecting leaks in the air spring bellows with the ignition switched on are now discussed.

[0024] A condition precedent for the activation of the subsequent logic is that an up-control operation was triggered for the switched-on ignition (KL15=An) which was not triggered because of a change of the desired level (manual level adjustment). If such a control operation took place at time point t₁, the air pressures p₁ in the air spring bellows and the time point t₁ are stored at the beginning of the control operation or with the detection of a drop below threshold value h_(su). The time point t₂ identifies the time point when the next control requirement is detected, that is, there is a drop below threshold value h_(su) and an up-control operation is triggered. At this time point t₂, before the start of the up control, the pressures p₂ are measured. When the conditions 1 and 3 are satisfied, the corresponding wheel-individual counter is incremented. To evaluate the leakage, that air spring is used in accordance with the method of the invention at whose axle the up control requirement was detected and that air spring is selected at which the vehicle body is at the lowest with respect to elevation, that is, where the lowest value of h₂ is present.

[0025] The wheel-individual counters are time controlled decremented with a value>Δt=t₂−t₁, for example, every hour (therefore, Δt=1 h) or Δt=2*(t₂−t₁), or when a leakage is not detected at the corresponding air spring, if in this time span, or during the leakage detection, the valves of the corresponding air springs were not actuated. Preferably, the wheel-specific counters are decremented down to the value 0.

[0026] If a wheel-individual counter exceeds a threshold value K₄, a leakage fault is detected which is allocated to the corresponding air spring.

[0027] According to the invention, the monitoring takes place only for pressure changes in order to exclude level changes because of changes of load. In order to eliminate influences caused by temperature, the time span between t₂ and t₁ is to be so selected that elevation changes caused by temperature influences still do not lead to exceeding the control hysteresis, that is, this does not lead to a crossing of the upper and lower threshold values h_(so) and h_(su).

[0028] Compared to air springs which are provided with a conventionally functioning level control arrangement, the method and arrangement of the invention afford the advantage that air spring leakages can be detected for the first time. Only an elevation sensor in the individual air spring bellows and a pressure sensor are conditions precedent.

[0029] A further advantage is that not only the basic detection of a leak in the arrangement is possible; rather a localization of the leak can also be undertaken, for example, air spring forward left (VL), et cetera.

[0030] It is further advantageous that a wheel-specific counter is incremented with the detection of a leak at an air spring. In this way it is possible to monitor the time-dependent course of the wheel-specific leakage.

[0031] A still further advantage is that a leakage fault is detected at an air spring only after a threshold value is exceeded. In this way, a defective detection of leakage because of elevation signal fluctuations caused, for example, by load changes and vibration excitations during travel or temperature fluctuations is substantially avoided.

[0032] A further advantage of the invention is that the pressure measurement is only undertaken after the evaluation of the elevation signals. There must be a drop below the lower elevation threshold value at least at one vehicle corner. In this way, pressurized air and energy are saved.

[0033] Finally, an indication as to a leak and/or a leakage fault can be stored in a permanent fault memory of the control apparatus for the purpose of providing information at a service center.

[0034] Acoustic or visual display of the leak in the interior of the vehicle for the driver is advantageous. The driver is informed directly as to the state of the level control arrangement and can take corresponding safety relevant steps, for example, by driving more slowly.

BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The invention will now be described with reference to the drawings wherein:

[0036]FIG. 1 is a schematic showing a motor vehicle air spring system;

[0037]FIG. 2 is a block diagram showing the signal detection for controlling a pneumatic level adjusting unit;

[0038]FIG. 3a is a plot showing the elevation signal state, pressure state and SG-state plotted as a function of time in accordance with a first time sequence;

[0039]FIG. 3b is a plot of the elevation signal state, pressure state and SG-state as a function of time for a second time sequence; and,

[0040]FIG. 4 is a plot showing the after-phases of the control apparatus after switch off of the ignition (KL15).

DESCRIPTION OF THE PREFERRED EMBODIMENTS OF THE INVENTION

[0041]FIG. 1 shows an air spring system with a level control for a motor vehicle. The air spring system 2 of FIG. 1 comprises four air springs (4 a, 4 b, 4 c, 4 d) which are assigned to the four vehicle wheels for supporting the chassis. The air springs (4 a, 4 b, 4 c, 4 d) are supplied with pressurized air from a common compressor 6 (compressor relay 20) via pressure lines 8. The individual air springs (4 a, 4 b, 4 c, 4 d) can be blocked with the aid of transverse check valves (10 a, 10 b, 10 c, 10 d). The air spring system 2 further includes an air store (pressure store) 14, which can be blocked by a pressure storage valve 12, a pressure sensor 16 and a discharge valve 18. The individual air springs (4 a, 4 b, 4 c, 4 d) have elevation sensors (22 a, 22 b, 22 c, 22 d) whose signals are evaluated by a level control unit (not shown).

[0042] Reference is made to FIG. 2 with respect to signal detection and coupling to the valves to be controlled.

[0043] The signals provided by the four elevation sensors (22 a, 22 b, 22 c, 22 d) and the pressure sensor 16 are supplied to an electronic control apparatus 24 which is connected to the ignition KL15 identified in FIG. 2 by reference numeral 26. In the control apparatus 24, the signals are processed for the purpose of controlling the valves (10 a, 10 b, 10 c, 10 d, 12, 18) and a compressor relay 20.

[0044]FIG. 3a shows the time-dependent trace of the elevation signal (h) and of the pressure (p) of an air spring as well as the time-dependent trace of the state of the control apparatus SG. The desired level of elevation h_(s) of the air spring is limited by the upper threshold value h_(so) and the lower threshold value h_(su). The time-dependent trace of the actual level elevation of the air spring is shown in the form of a thick line h(t). At time point t₁, the actual level elevation h₁ lies between the desired level elevation h_(s) and the lower threshold value h_(su). The pressure p(t₁) at time point t₁ is shown in the center diagram of the pressure plotted against time. In the embodiment shown, the pressure p(t₁) corresponds precisely to the desired pressure p_(s). No pressure threshold values are shown which can of course be present so that even slight pressure differences between the time points t₁ and t₂ do not mean load changes on the vehicle or the air springs. The state of the control apparatus SG is shown in the lower diagram where the state of SG is plotted as a function of time. At time point t₁, the state of the control apparatus SG changes from active to sleep.

[0045] After a pregiven time span Δ=t₂−t₁, the control apparatus SG is automatically transferred from the sleep mode (sleep) into the active state (active). The actual level elevation h₂(t₂) is determined at time point t₂. The actual level elevation h₂(h(t₂)) at time point t₂ lies below the threshold value h_(su). In this way, the condition {h(t₁)−h(t₂)}*K₃/(t₂−t₁)>K₂ for an elevation level change from time point t₁ to time point t₂ is satisfied. K₂ and K₃ are freely selectable constants and are dependent upon the characteristics of the vehicle.

[0046] Since the threshold K₂ has been exceeded, the actual pressure p(t₂) is determined which, in this case, corresponds to the desired pressure p_(s). The further condition for a detection of a leakage is then satisfied, namely, that no pressure change takes place in accordance with the condition (p₁−p₂)>K₁. A leakage in the corresponding air spring is detected and a wheel-specific counter Z_(T) (not shown) is incremented. A leakage fault is detected when the wheel-specific counter Z_(T) exceeds a threshold value, for example, the value 2. The leakage fault can be displayed optically and/or be provided acoustically in the vehicle and is stored parallelly in a permanent memory of the control apparatus SG for maintenance purposes.

[0047] At time point t₂, the control apparatus SG detects a drop below the threshold value h_(su) at the corresponding air spring and initiates an up-control operation of the air spring up to the desired level elevation h_(s). The air pressure p(t) in the corresponding air spring does not change in this time span because no load change was undertaken at the vehicle or at the air spring. After reaching the desired level elevation h_(s), the control apparatus SG is transferred from the active state (active) to the sleep mode (sleep).

[0048] The control apparatus SG can be transferred automatically from the state “sleep” into the state “active” after a pregiven time span (not shown). Thereafter, the procedure shown at time point t₂ is run and the actual level elevation h(t) and, if required, the pressure p(t) is determined and is compared to the measuring results of the previous time point (old time point t₂). With a renewed drop below the threshold value h_(su) by the actual level elevation h(t) and the satisfaction of the pressure condition (p₁−p₂)>K₁, the wheel-specific counter Z_(T) is incremented anew. If there is no drop below threshold h_(su) at the new time point t₂, then no pressure p₂ is determined and the wheel-specific counter Z_(T) is decremented down to a minimum to the value 0.

[0049]FIG. 3b shows another time-dependent trace of the elevation signal h(t) and the pressure signal p(t) of an air spring and of the state of the control apparatus SG. The control apparatus SG in FIG. 3b is always active and does not change its state within the time run. It is, however, also possible that the control apparatus SG is in the sleep mode before, between and after the given time points t₁, t_(r), t_(s) and t₂. The pressure p(t) likewise does not change over the entire time span and corresponds to the desired pressure p_(s). The actual level elevation h1 drops below or reaches threshold value h_(su) at time point t₁. A leakage is not detected because no previous time point for comparing the elevation and pressure signals is present. At time point t₁, a control requirement of the air spring however is detected. An up-control operation of the air spring is started at time point t_(r) and is ended at time point t_(s) when the actual level elevation h_(r) corresponds to the desired level elevation h_(s).

[0050] The actual level elevation h₂ reaches or drops anew below the threshold value h_(su) at a further time point t₂ which is later in time. If this takes place after a pregiven time span Δt=t₂−t₁ and the condition 1 wherein (p₁−p₂)>K₁ and the condition 3 wherein t₂−t₁<T_(Limit) are satisfied, then a leakage is detected and a wheel-specific counter Z_(T) is incremented. Or, after a pregiven time span (for example, t₂+(t_(r)−t₁)) the actual level elevation is determined without an up-control operation being carried out at the air spring. The actual level elevation h₂ at the air spring at time point t₂+(t_(r)−t₁) has so changed relative to the actual level elevation h₁ at time point t₁ that the threshold value K₂ is exceeded. A leakage at the air spring is detected and the wheel-specific counter Z_(T) is incremented.

[0051] If the leakage at an air spring is detected several times and if the wheel-specific counter Z_(T) reaches or exceeds a pregiven threshold value K₄, then a leakage fault is detected. The leakage fault is displayed optically and/or is provided acoustically in the vehicle and can be stored in a fault memory of the control apparatus SG. The leakage can also be displayed directly as a leakage fault of the corresponding air spring in the vehicle acoustically and/or optically. Or, an up-control operation is carried out at the corresponding air spring up to the desired level elevation h_(s). If an up-control operation is executed after the time point t₂, then, the illustrated sequence shown at time point t₂ begins anew when there is a drop below the threshold value h_(su).

[0052]FIG. 4 shows the time-dependent trace of the states “active” and “sleep” in the control apparatus SG. At time point to, the ignition K15 is switched off. The control apparatus is transferred only after an after-run phase t₁−t₀ from the state “active” into the state “sleep”. After a pregiven time span t₂−t₁ at time point t₂, the control apparatus is automatically transferred from the sleep state into the active state. An after-run phase begins wherein the actual level elevation of the air springs as well as the pressure in the individual air springs is determined. If the conditions for the pressure and the elevation level are satisfied so that the threshold values K₁ and K₂ are reached or exceeded, then a leak at the corresponding air spring is detected. An up-control operation at the corresponding air spring is carried out. When the wheel-specific counter Z_(T) exceeds, a leakage fault is detected which is displayed to the operator of the vehicle. After the up-control operation or after no leakage was detected (K₁ and K₂ were not reached or exceeded), the control apparatus SG automatically transfers from the active state into the sleep state.

[0053] The control apparatus SG is again transferred from the sleep state into the active state after a fixed pregiven time span t₃−t₂ which must not correspond to the time span t₂−t₁. The check as to leakage in accordance with the foregoing is carried out anew. The operation of the automatic waking of the control apparatus SG from the sleep state to the active state can be repeated as often as possible after fixedly pregiven time spans.

[0054] It is understood that the foregoing description is that of the preferred embodiments of the invention and that various changes and modifications may be made thereto without departing from the spirit and scope of the invention as defined in the appended claims. 

What is claimed is:
 1. A method for detecting leakages in a motor vehicle air spring system including a plurality of air springs and having a level control arrangement, the level control arrangement including: an electronic control apparatus; a plurality of elevation determination sensors associated with corresponding ones of said air springs; a pressure sensor; a plurality of air spring valves corresponding to respective ones of said air springs and a compressor; said elevation determination sensors and said pressure sensor being connected to said control apparatus for supplying signals thereto; said control apparatus functioning to process said signals for controlling said air spring valves and said compressor for controlling the motor vehicle upwardly or downwardly in elevation; the method comprising the steps of: at a first time point (t₁), measuring the elevation-distance values (h₁) and the corresponding air pressure (p₁) for each air spring and storing said elevation-distance values with the time of measurement with said first time point (t₁) being selected so that said control apparatus is either transferred from an active mode into a sleep mode or the corresponding elevation-distance value (h₁) drops below a threshold value (h_(su)); at a second time point (t₂), measuring the elevation-distance value (h₂) and, if needed, the air pressure (p₂) in the corresponding air springs with said second time point (t₂) being so selected that either a pregiven time span (Δt) has elapsed relative to the time point (t₁) and/or the corresponding elevation-distance value (h₂) has dropped below a threshold value (h_(su)) whereby a control need is recognized; and, detecting a leakage of a particular air spring when no desired level change (h_(s)) takes place between said first time point (t₁) and said second time point (t₂) and, at this particular air spring, only a pressure change was determined from said first time point (t₁) to said second time point (t₂) in accordance with a first condition (p₁−p₂)>K₁ and, simultaneously, an elevation change (h₂) was determined in accordance with a second condition {h(t₁)−h(t₂)}*K₃/(t₂−t₁)>K₂.
 2. The method of claim 1, wherein those air springs are used to detect a leakage which are the lowest in elevation.
 3. The method of claim 2, wherein those air springs are used which are at the lowest elevation-distance value (h2) in accordance with the condition Min(K_(2,VL), K_(2,VR), K_(2,HL), K_(2,HR)).
 4. The method of claim 3, wherein for at least one air spring, a wheel-specific counter (Z_(T)) is incremented for at least one air spring when a leak of the corresponding air spring is detected.
 5. The method of claim 4, wherein a leakage fault of an air spring is detected when a wheel-specific counter (Z_(T)) exceeds a threshold value (K₄) which is assigned to the corresponding air spring.
 6. The method of claim 5, wherein the wheel-specific counters (Z_(T)) (VL, VR, HL, HR) of the corresponding air spring are decremented after a pregiven time span when the valves of the corresponding air springs have not been actuated within a pregiven time span and/or the elevation-distance values (h₂) of the corresponding air springs have not dropped below the threshold value (h_(su)) within the pregiven time span.
 7. The method of claim 1, comprising the further steps of: selecting the time point (t₁) when said control apparatus is transferred from said active state into said sleep mode; and, selecting the time point (t₂) in accordance with a pregiven time span (Δt=t₂−t₁); at time point (t₂), transferring said control apparatus out of said sleep mode into the active mode; and, detecting leakage and measuring the corresponding air pressures (p₂) (VL, VR, HL, HR) in the air springs only after there is a drop below the threshold value (h_(su)) at at least one of said air springs.
 8. The method of claim 7, wherein an up-control operation in the corresponding air spring takes place up to the desired level (h_(s)) of the threshold values (h_(su)) and (h_(so)) after there is a drop below the threshold value (h_(su)) at one of the air springs.
 9. The method of claim 7, wherein said control apparatus transfers from the active state into the sleep mode when the ignition of the motor vehicle is switched off.
 10. The method of claim 8, wherein said control apparatus is transferred the active state into the sleep mode after all required up-control operations are ended.
 11. The method of claim 7, wherein said control apparatus is transferred from the active state into the sleep mode when, after a time point (t₂), no leakage detection takes place and/or there was no drop below the threshold value (h_(su)) at any of said air springs.
 12. The method of claim 1, wherein the leakage and/or the leakage fault of the corresponding air spring or the air spring system in said motor vehicle is displayed acoustically or visually and/or a leakage and/or a leakage fault is stored in the memory of said control apparatus.
 13. An arrangement for detecting leakages in a motor vehicle air spring system including a plurality of air springs and having a level control arrangement, the level control arrangement including: an electronic control apparatus; a plurality of elevation determination sensors associated with corresponding ones of said air springs; a pressure sensor; a plurality of air spring valves corresponding to respective ones of said air springs and a compressor; said elevation determination sensors and said pressure sensor being connected to said control apparatus for supplying signals thereto; said control apparatus functioning to process said signals for controlling said air spring valves and said compressor for controlling the motor vehicle upwardly or downwardly in elevation; the arrangement comprising: said control apparatus functioning to perform the following method steps: at a first time point (t₁), measuring the elevation-distance values (h₁) and the corresponding air pressure (p₁) for each air spring and storing said elevation-distance values with the time of measurement with said first time point (t₁) being selected so that said control apparatus is either transferred from an active mode into a sleep mode or the corresponding elevation-distance value (h₁) drops below a threshold value (h_(su)); at a second time point (t₂), measuring the elevation-distance value (h₂) and, if needed, the air pressure (p₂) in the corresponding air springs with said second time point (t₂) being so selected that either a pregiven time span (Δt) has elapsed relative to the time point (t₁) and/or the corresponding elevation-distance value (h₂) has dropped below a threshold value (h_(su)) whereby a control need is recognized; detecting a leakage of a particular air spring when no desired level change (h_(s)) takes place between said first time point (t₁) and said second time point (t₂) and, at this particular air spring, only a pressure change was determined from said first time point (t₁) to said second time point (t₂) in accordance with a first condition (p₁−p₂)>K₁ and, simultaneously, an elevation change (h₂) was determined in accordance with a second condition {h(t₁)−h(t₂)}*K₃/(t₂−t₁)>K₂; and, said control apparatus including a function logic which is operatively connected to said elevation determination sensors, said pressure sensor and said air spring valves in such a manner that a leakage of the air spring system or the corresponding air spring is detected at a corner of the motor vehicle when there is a pregiven desired level (h_(s)) between two pregiven time points (t₁, t₂) and when there are pressure changes in accordance with said first condition from the first time point (t₁) to the second time point (t₂) and when there is a simultaneous elevation level change in accordance with said second condition. 